Solved

Yahoo/bellsouth.net reports my sender as a possible fraud/spoof following an on-premises Exchange to Office 365 Exchange Cutover Migration

Posted on 2016-11-10
3
102 Views
Last Modified: 2016-11-22
Recently completed an on-premises Exchange to Office 365 hosted Exchange cutover migration. Everything went as advertised and the company is using hosted Exchange without issues. The on-premises Exchange server has been shut down since the migration. The one issue I'm having: When someone sends an email from the company domain to one of the employees' PERSONAL bellsouth.net account, the bellsouth.net account holder gets the email, but then gets another email saying (see graphic): This sender failed our fraud detection checks and may not be who they appear to be. I reviewed the DNS records for the company domain and found a legacy SRV mail protection record and a mail A record related to the on-premises Exchange server, which I have since deleted. But even after a day or so allowing for propagation, the problem persists. Thoughts?
yahoo-emailerr.JPG
0
Comment
Question by:tcianflone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 500 total points
ID: 41882722
Hello,

You are going on the good track. Because the problem is really related to anti spam checks and revisions, I believe that it is what you just reconfigured correctly: The ID Filtering / SPF that are validated with the TXT record in your DNS zone.

Additionally, like you stated, it usually takes from 0 to 3 days. However, some anti spam solutions store information locally for some additional time.

Try to check if there is a process (usually it is done online), where you can contact the destination domain messaging administrators, and complete any additional action to take you out from possible block lists in 'their systems'.
0
 
LVL 1

Author Comment

by:tcianflone
ID: 41886906
So, it's been a week now and this is still happening. The DNS zone looks fine to me, like every other Office 365 hosted Exchange service I have ever set up. And bellsouth.net is the ONLY email service complaining about it. Can anyone provide a link to where I can report this to AT&T email admins? That company is so huge, I can't imagine actually finding the right place to report something like this.
0
 
LVL 14

Expert Comment

by:Schnell Solutions
ID: 41888062
You can start here...

http://rbl.att.net/block_inquiry.html

There are many links for many tasks, i.e. Tools for administrators or mail systems whose messages has been blocked.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Adoption of Microsoft’s Enterprise Mobility and Security solution and Office 365 will re-order the File Sync and Share market Microsoft has stated that its Enterprise Mobility + Security (EMS) is the fastest growing product in the history of the …
It’s the first day of March, the weather is starting to warm up and the excitement of the upcoming St. Patrick’s Day holiday can be felt throughout the world.
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question